2017-01-13 40 views
0

所以我試圖生成一些安全的API密鑰,但它似乎沒有生成正確的,我沒有任何運氣跟隨API文檔。Algolia生成無效的安全API密鑰

這是我在做什麼

var algoliasearch = require('algoliasearch'); 

var admin_client = algoliasearch('APP', 'ADMIN_KEY'); 
var search_client = algoliasearch('APP', 'ONLY_SEARCH_KEY'); 

var admin_index = admin_client.initIndex('INDEX'); 
var search_index = search_client.initIndex('INDEX'); 

admin_index.search('dav', (err, content) => { console.log(err, content) }); 
//------------------CONSOLE------------------------------- 
null { hits: 
[ { firstname: 'David', 
    lastname: 'De Anda', 
    _tags: [Object], 
    objectID: '2', 
    _highlightResult: [Object] } ], 
nbHits: 1, 
page: 0, 
nbPages: 1, 
hitsPerPage: 20, 
processingTimeMS: 1, 
query: 'dav', 
params: 'query=dav' } 
//------------------------------------------------- 

search_index.search('dav', (err, content) => { console.log(err, content) }); 

//------------------CONSOLE------------------------------- 
null { hits: 
[ { firstname: 'David', 
    lastname: 'De Anda', 
    _tags: [Object], 
    objectID: '2', 
    _highlightResult: [Object] } ], 
nbHits: 1, 
page: 0, 
nbPages: 1, 
hitsPerPage: 20, 
processingTimeMS: 1, 
query: 'dav', 
params: 'query=dav' } 
//------------------------------------------------- 

一切似乎到現在爲止 工作,但現在我想產生一些擔保API密鑰

var valid_until = Math.floor(Date.now()/1000) + 3600 

var from_admin_api_key = admin_client.generateSecuredApiKey('from_admin', {validUntil: valid_until}); 
var from_search_api_key = search_client.generateSecuredApiKey('from_search', {validUntil: valid_until}); 

var sub_admin_client = algoliasearch('APP', from_admin_api_key); 
var sub_search_client = algoliasearch('APP', from_search_api_key); 

var sub_admin_index = sub_admin_client.initIndex('INDEX'); 
var sub_search_index = sub_search_client.initIndex('INDEX'); 

sub_admin_index.search('dav', (err, content) => { console.log(err, content) }); 
//------------------CONSOLE------------------------------- 
{ Error 
    at success (/app/node_modules/algoliasearch/src/AlgoliaSearchCore.js:334:32) 
    at process._tickDomainCallback (internal/process/next_tick.js:129:7) 
    name: 'AlgoliaSearchError', 
    message: 'Invalid Application-ID or API key', 
    debugData: 
    [ { currentHost: 'https://ge24e6css9-dsn.algolia.net', 
     headers: [Object], 
     content: '{"params":"query=dav"}', 
     contentLength: 22, 
     method: 'POST', 
     timeouts: [Object], 
     url: '/1/indexes/INDEX/query', 
     startTime: 2017-01-13T17:46:42.519Z, 
     endTime: 2017-01-13T17:46:44.038Z, 
     duration: 1519, 
     statusCode: 403 } ], 
    statusCode: 403 } undefined 
//------------------------------------------------- 

sub_search_index.search('dav', (err, content) => { console.log(err, content) }); 

//------------------CONSOLE------------------------------- 
{ Error 
    at success (/app/node_modules/algoliasearch/src/AlgoliaSearchCore.js:334:32) 
    at process._tickDomainCallback (internal/process/next_tick.js:129:7) 
    name: 'AlgoliaSearchError', 
    message: 'Invalid Application-ID or API key', 
    debugData: 
    [ { currentHost: 'https://ge24e6css9-dsn.algolia.net', 
     headers: [Object], 
     content: '{"params":"query=dav"}', 
     contentLength: 22, 
     method: 'POST', 
     timeouts: [Object], 
     url: '/1/indexes/INDEX/query', 
     startTime: 2017-01-13T17:46:42.519Z, 
     endTime: 2017-01-13T17:46:44.038Z, 
     duration: 1519, 
     statusCode: 403 } ], 
    statusCode: 403 } undefined 
//------------------------------------------------- 

回答

0

我誤解了generateSecuredApiKey第一個參數實際上是原始API Key。

所以正確的代碼將

var from_admin_api_key = admin_client.generateSecuredApiKey('ADMIN_KEY', {validUntil: valid_until}); 
var from_search_api_key = search_client.generateSecuredApiKey('ONLY_SEARCH_KEY', {validUntil: valid_until}); 

過程和生成的密鑰形式ADMIN_KEY將無法正常工作。